$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa File: 1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa (raw, json) Hash identifier: DHpf7FW4tsA2f7zWH70Digstc+me+CMpmFgjZXi6Qso= Subject key identifier: 99:BD:B4:44:44:94:FD:88:4B:09:F8:47:28:F3:31:6C:C6:B1:E2:EF Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4CBA Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:52:25 +0000 ROA not before: Thu 28 Aug 2025 14:52:25 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131366 IP address blocks: 103.146.22.0/23 maxlen: 24 103.153.68.0/23 maxlen: 24 103.163.214.0/23 maxlen: 23 103.176.20.0/23 maxlen: 24 2400:ab60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19642 (0x4cba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:52:25 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d29-7dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:69:b8:c2:d0:80:e8:7d:da:02:4c:06:6a:63: 4d:36:2f:0d:0f:b4:eb:70:17:69:5f:9c:77:25:6a: 88:25:a1:e3:32:d3:ad:76:b4:7c:c0:13:cd:8d:b2: a4:3f:2d:2d:5f:68:1a:7f:b4:d4:76:da:98:66:79: 82:71:5b:82:74:77:3c:18:a2:19:c5:49:ef:d1:59: d2:26:0b:58:2f:fe:e4:e4:b5:46:a0:ef:1e:ee:8f: 35:72:1b:31:ff:25:df:9d:62:be:61:de:29:6e:81: fc:6e:fe:0e:3f:a0:12:53:a3:e0:f5:60:78:7e:9e: 96:2c:89:1f:9b:08:5e:9b:c9:d0:7b:47:03:d7:37: e6:e1:8f:de:42:98:a4:f5:6b:95:6a:aa:15:30:4d: ec:67:a9:77:e5:05:16:60:ed:1b:ba:7d:e0:e3:3b: e4:af:92:b5:fd:16:b4:0a:92:20:fe:23:57:6e:fc: 4d:73:5d:f7:1c:d1:a8:f1:d8:fe:26:2b:c6:77:e7: 40:ed:a0:ae:50:c3:2e:1c:7d:db:ca:8c:97:cc:ad: 7c:60:5c:f7:5a:1d:16:8e:f6:0e:e7:ec:be:80:c2: 5c:7c:7e:ab:08:84:a3:a0:d6:a9:9d:0f:8d:b9:5e: ff:0c:17:4a:69:c0:03:36:b9:3e:bb:eb:d9:51:e2: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BD:B4:44:44:94:FD:88:4B:09:F8:47:28:F3:31:6C:C6:B1:E2:EF X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1FA82F4CA41C11EBBBF1CA7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.146.22.0/23 103.153.68.0/23 103.163.214.0/23 103.176.20.0/23 IPv6: 2400:ab60::/48 Signature Algorithm: sha256WithRSAEncryption 72:de:ca:89:d4:c5:6c:1e:f4:65:87:06:56:14:78:2c:25:5b: c9:80:fa:d6:5b:c2:5b:d9:90:0a:ad:ee:0a:34:49:f0:8e:6d: b7:31:3c:4d:bb:fe:de:72:51:f9:18:94:df:65:fb:c6:43:a9: ba:4c:24:d0:03:7e:11:27:2f:6c:81:4f:d7:bd:04:53:e5:6a: 32:8d:c5:c0:fc:b3:86:76:d5:69:6d:f7:0e:8d:8f:1a:05:78: ac:d4:99:63:e2:af:5a:f2:18:93:f2:37:5b:4e:de:08:e6:f3: 1d:79:a2:06:cb:97:c9:72:73:6b:82:a2:dc:ed:96:3f:6b:8c: 83:fa:25:74:10:a2:c4:22:5c:6b:7e:ae:9e:ba:ab:6e:76:1e: 28:b2:7d:12:ad:8e:a2:b6:80:5c:3c:02:47:b8:90:c6:c9:4e: 05:eb:86:b8:76:42:99:44:e1:e8:70:a7:4c:ff:e8:03:d5:07: a2:9f:70:4e:37:54:d2:03:52:1c:33:07:95:f1:a5:c5:6c:07: e7:8c:51:55:cc:1b:cb:b2:f5:c5:7d:6d:ba:7a:cb:4e:e8:12: 77:5c:c0:8c:1b:5d:24:9f:4b:b5:67:a4:be:6f:c9:bb:04:d9: 20:d5:f7:ba:9f:70:5f:b1:e3:30:f8:5b:6b:58:8e:57:a0:94: 67:c8:55:39 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICTLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1MjI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQyOS03ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGm4wtCA6H3aAkwGamNNNi8ND7TrcBdpX5x3JWqIJaHjMtOtdrR8wBPNjbKk Py0tX2gaf7TUdtqYZnmCcVuCdHc8GKIZxUnv0VnSJgtYL/7k5LVGoO8e7o81chsx /yXfnWK+Yd4pboH8bv4OP6ASU6Pg9WB4fp6WLIkfmwhem8nQe0cD1zfm4Y/eQpik 9WuVaqoVME3sZ6l35QUWYO0bun3g4zvkr5K1/Ra0CpIg/iNXbvxNc133HNGo8dj+ JivGd+dA7aCuUMMuHH3byoyXzK18YFz3Wh0WjvYO5+y+gMJcfH6rCISjoNapnQ+N uV7/DBdKacADNrk+u+vZUeLuqQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFJm9tERE lP2ISwn4RyjzMWzGseLvMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMUZBODJGNENB NDFDMTFFQkJCRjFDQTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMB4EAgABMBgDBAFnkhYDBAFnmUQDBAFno9YDBAFnsBQwDwQCAAIwCQMHACQA q2AAADANBgkqhkiG9w0BAQsFAAOCAQEAct7KidTFbB70ZYcGVhR4LCVbyYD61lvC W9mQCq3uCjRJ8I5ttzE8Tbv+3nJR+RiU32X7xkOpukwk0AN+EScvbIFP170EU+Vq Mo3FwPyzhnbVaW33Do2PGgV4rNSZY+KvWvIYk/I3W07eCObzHXmiBsuXyXJza4Ki 3O2WP2uMg/oldBCixCJca36unrqrbnYeKLJ9Eq2OoraAXDwCR7iQxslOBeuGuHZC mUTh6HCnTP/oA9UHop9wTjdU0gNSHDMHlfGlxWwH54xRVcwby7L1xX1tunrLTugS d1zAjBtdJJ9LtWekvm/JuwTZINX3up9wX7HjMPhba1iOV6CUZ8hVOQ== -----END CERTIFICATE-----Generated at Mon Oct 20 14:21:55 2025 by rpki-client